8.8Yüksek

CVE-2026-102125Kiteworks Core Sandbox Escape

Kiteworks Core Yayım: (1 ay önce)

Açıklama

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt the service on the affected appliance.

Zayıflık türü (CWE): CWE-653CWE-668

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
accellion kiteworks < 9.5.0
Kiteworks Core < 9.5.0, fixed 9.5.0

Kaynaklar ve yamalar

  • url vendor-advisoryBroken Link
  • url third-party-advisoryBroken Link

CPE eşleşmeleri (NVD) (1)

  • cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:* < 9.5.0